The vulnerability allows a low‑privileged attacker with network access to the HTTP interface to take over the Oracle WebCenter Content server. Successful exploitation results in a complete compromise, affecting confidentiality, integrity, and availability as reflected in a CVSS 8.8 severity score. The flaw is capable of yielding full system control, consistent with an RCE scenario.

Affected versions are Oracle WebCenter Content 12.2.1.4.0 and 14.1.2.0.0. These versions are part of Oracle’s Fusion Middleware suite and are used in content management deployments.

The CVSS vector indicates a network access requirement with low attack complexity and low privilege. The EPSS score of less than 1% suggests that automated exploitation has not been widely observed, and the vulnerability is not yet listed in the CISA KEV catalog. Nonetheless, the high impact and ease of exploitation make it a serious threat, particularly for environments that expose the HTTP port to untrusted networks or lack strong authentication controls.